Lucene search
GoogleOSV:GHSA-6XX3-RG99-GC3PHistoryAug 13, 2021 - 3:22 p.m.
Timing based private key exposure in Bouncy Castle
2021-08-1315:22:31
Google
osv.dev
15
0.001 Low
EPSS
Percentile
47.9%
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.2.1, BC before 1.66, BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.
Related
redhatcve
redhatcve
CVE-2020-15522
2021-05-20 17:45:56
debiancve
debiancve
CVE-2020-15522
2021-05-20 12:15:08
ibm
ibm
ubuntucve
ubuntucve
CVE-2020-15522
2021-05-20 00:00:00
nessus
nessus
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:2163-1)
2021-06-27 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2021:2163-1)
2021-07-13 00:00:00
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2021:0940-1)
2021-06-30 00:00:00
github
github
Timing based private key exposure in Bouncy Castle
2021-08-13 15:22:31
suse
suse
Security update for bouncycastle (moderate)
2021-06-29 00:00:00
Security update for bouncycastle (moderate)
2021-07-11 00:00:00
freebsd
freebsd
The Bouncy Castle Crypto APIs -- EC math vulnerability
2020-07-04 00:00:00
gitlab
gitlab
cve
cve
CVE-2020-15522
2021-05-20 12:15:08
prion
prion
Information disclosure
2021-05-20 12:15:00
veracode
veracode
Information Disclosure
2021-05-24 02:29:03
cvelist
cvelist
CVE-2020-15522
2021-05-20 11:20:18
osv
osv
CVE-2020-15522
2021-05-20 12:15:08
nvd
nvd
CVE-2020-15522
2021-05-20 12:15:08
cgr
cgr
CVE-2020-15522 vulnerabilities
2024-05-19 03:07:16
redhat
redhat
hp
hp
HP Security Manager - Multiple vulnerabilities
2022-12-12 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00